ollygarden-otel-collector-config-decomposition
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the
otelcol-contribbinary to validate and verify configuration splits. - Evidence:
references/verifying.mdcontains specific instructions to runotelcol-contrib validateandotelcol-contrib print-configto ensure behavior equivalence. - [PROMPT_INJECTION]: The skill processes user-supplied OpenTelemetry configuration files, which constitutes a surface for indirect prompt injection if the files contain malicious content that influences the agent's logic or CLI tool behavior.
- Ingestion points: Monolithic OTel collector configuration files provided by the user (as described in
SKILL.md). - Boundary markers: Not present; the skill lacks explicit instructions to treat the configuration data as untrusted or to use delimiters to prevent command injection or instruction override.
- Capability inventory: The skill facilitates file writing and subprocess execution (
otelcol-contrib). - Sanitization: Absent; there are no instructions to sanitize or validate the content of the YAML files beyond checking structural equivalence.
Audit Metadata